critical9.8
CVE-2018-6641
An Arbitrary Free (Remote Code Execution) issue was discovered in Design Science MathType 6.9c.
Impact
An Arbitrary Free (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can overwrite a structure, leading to a function call with an invalid parameter, and a subsequent free of important data such as a function pointer or list pointer. This is fixed in 6.9d.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wiris | Mathtype | Version 6.9c |